WORLD INTELLECTUAL PROPERTY ORGANIZATION 
International Bureau 




PCT 

INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) 



(51) International Patent Classification 6 : 
G06F 1/00, H04L 29/06 



Al 



(11) International Publication Number: WO 98/44402 

(43) International Publication Date: 8 October 1998 (08.10.98) 



(21) International Application Number: PCT/GB98/00808 

(22) International Filing Date: 18 March 1998 (18.03.98) 



(30) Priority Data: 

97302194.2 27 March 1997 (27.03.97) EP 

(34) Countries for which the regional or 

international application was filed: GB et al. 



(71) Applicant (for all designated States except US): BRITISH 
TELECOMMUNICATIONS PUBLIC LIMITED COM- 
PANY [GB/GB]; 81 Newgate Street, London EC1A 7AJ 
(GB). 

(72) Inventors; and 

(75) Inventors/Applicants (for US only): BRAMHILL, Ian, Duncan 
[GB/GB]; 76 Goring Road, Ipswich, Suffolk IP4 5LP (GB). 
SIMS, Matthew, Robert, Charles [GB/GB]; 39 Lister Road, 
Ipswich, Suffolk IP1 5EQ (GB). 

(74) Agents: READ, Matthew, Charles et al.; Venner, Shipley & 
Co., 20 Little Britain, London EC1 A 7DH (GB). 



(81) Designated States: AL, AM, AT, AU, AZ, BA, BB, BG, BR, 
BY, CA, CH, CN, CU, CZ, DE, DK, EE, ES, FI, GB, GE, 
GH, GM, GW, HU, ID, IL, IS, JP, KE, KG, KP, KR, KZ, 
LC, LK, LR, LS, LT, LU, LV, MD, MG, MK, MN, MW, 
MX, NO, NZ, PL, PT, RO, RU, SD, SE, SG, SI, SK, SL, 
TJ, TM, TR, TT, UA, UG, US, UZ, VN, YU, ZW, ARIPO 
patent (GH, GM, KE, LS, MW, SD, SZ, UG, ZW), Eurasian 
patent (AM, AZ, BY, KG, KZ, MD, RU, TJ, TM), European 
patent (AT, BE, CH, DE, DK, ES, FI, FR, GB, GR, IE, IT, 
LU, MC, NL, PT, SE), OAPI patent (BF, BJ, CF, CG, CI, 
CM, GA, GN, ML, MR, NE, SN, TD, TG). 



Published 

With international search report. 



(54) Title: COPY PROTECTION OF DATA 
(57) Abstract 

A copyright protection scheme is provided in which data is 
downloaded from a server (1), typically over the World Wide Web 
(2) to a client (3), for presentation to a user. The downloaded 
data is cryptographically protected, by encryption and hashing. 
When displayed by the client, storing and copying functions are 
selectively disabled in respect of the data, in order to prevent 
unauthorised copying. 




FOR THE PURPOSES OF INFORMATION ONLY 



Codes used to identify States party to the PCT on the front pages of pamphlets publishing international applications under the PCX 



AL 


Albania 


ES 


Spain 


AM 


Armenia 


FI 


Finland 


AT 


Austria 


FR 


France 


AU 


Australia 


GA 


Gabon 


AZ 


Azerbaijan 


GB 


United Kingdom 


BA 


Bosnia and Herzegovina 


GE 


Georgia 


BB 


Barbados 


GH 


Ghana 


BE 


Belgium 


GN 


Guinea 


BF 


Burkina Faso 


GR 


Greece 


BG 


Bulgaria 


HU 


Hungary 


BJ 


Benin 


IE 


Ireland 


BR 


Brazil 


IL 


Israel 


BY 


Belarus 


IS 


Iceland 


CA 


Canada 


IT 


Italy 


CF 


Central African Republic 


JP 


Japan 


CG 


Congo 


KE 


Kenya 


CH 


Switzerland 


KG 


Kyrgyzstan 


a 


C6te d'lvoire 


KP 


Democratic People's 


CM 


Cameroon 




Republic of Korea 


CN 


China 


KR 


Republic of Korea 


CU 


Cuba 


KZ 


Kazakstan 


CZ 


Czech Republic 


LC 


Saint Lucia 


DE 


Germany 


LI 


Liechtenstein 


DK 


Denmark 


LK 


Sri Lanka 


EE 


Estonia 


LR 


Liberia 



LS 

LT 

LU 

LV 

MC 

MD 

MG 

MK 

ML 

MN 

MR 

MW 

MX 

NE 

NL 

NO 

NZ 

PL 

PT 

RO 

RU 

SD 

SE 

SG 



Lesotho 

Lithuania 

Luxembourg 

Latvia 

Monaco 

Republic of Moldova 

Madagascar 

The former Yugoslav 

Republic of Macedonia 

Mali 

Mongolia 

Mauritania 

Malawi 

Mexico 

Niger 

Netherlands 

Norway 

New Zealand 

Poland 

Portugal 

Romania 

Russian Federation 

Sudan 

Sweden 

Singapore 



SI 


Slovenia 


SK 


Slovakia 


SN 


Senegal 


sz 


Swaziland 


TD 


Chad 


TG 


Togo 


TJ 


Tajikistan 


TM 


Turkmenistan 


TR 


Turkey 


TT 


Trinidad and Tobago 


UA 


Ukraine 


UG 


Uganda 


US 


United States of America 


uz 


Uzbekistan 


VN 


Viet Nam 


YU 


Yugoslavia 


zw 


Zimbabwe 



WO 98/44402 



PCT/GB98/00808 



Copy Protection of Data 
Field of the invention 

This invention relates to protecting data against copying and has particular 
5 application to protecting data transmitted through a network, such as 
hypermedia transmitted over a web-based network. 

Background 

It is known that data in the form of hypermedia such as hypertext, is often 
to written in the hypertext language HTML and arranged in webpages that are 
provided by a server connected through a network to a client. The client 
may comprise a personal computer or other processing device capable of 
presenting the data retrieved from the server to a user. The network may 
comprise a local area network (LAN), a wide area network (WAN) or may 
n comprise the Internet. For example, the World Wide Web comprises many 
servers connected over the Internet in a web, which have addresses in the 
form of universal resource locators (URL). 

The hypertext information is arranged in webpages which include hotspots to 
20 allow the user to establish a link to another webpage, which may be located 
on the same or a different server, the routing to the document being achieved 
by use of a URL in the webpage at the hotspot. 

Web clients typically access the hypermedia information using a browser. An 
25 overview of the World Wide Web and HTML is given in Chapter 1 of 

"HTML 3.2 and CGI Unleashed" J. December and M. Ginsberg 1996 (ISBN 1- 
57521-177-7). 

As well known in the art, HTML webpages can display text, graphics and 
30 files of other descriptions such as video images, animated graphics and audio 
samples. Hypermedia have the significant advantage that the client can 
rapidly transfer viewing from one document to another by using a mouse to 
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click on hotspots in the document, permitting the user to transfer from one 
web site to another, which may be at different physical locations. 

The individual works which are displayed on the HTML pages may be 
5 copyright works. Because of the ease with which the copyright work may be 
viewed, transmitted and copied on the web, it is difficult for a copyright 
owner to enforce its copyright. For example, when a graphics file has been 
downloaded to a client, it may be readily copied onto the hard disc of a 
client's computer and replicated many times digitally, with no significant 
w degradation from copy to copy. 

Summary of the invention 

With a view to overcoming this problem, the invention provides a method of 
copy protecting data sent from a server to a client for presentation to a user, 
/j comprising: cryptographically protecting the data; sending the 

cryptographically protected data to the client; and selectively controlling 
copying functions of the client in respect of the data whilst the data is being 
held by the client in a form suitable for presentation to the user. 

20 The data may be cryptographically protected by encryption and/or by an 
integrity checking procedure such as hashing. 

More specifically, the method according to the invention may include 
downloading a program object to the client, running the program object on 

25 the client such that a request is uploaded to the server for a file containing the 
cryptographically protected data, downloading the file to the client, and 
rendering the cryptographically protected data in an unprotected form suitable 
for presentation to the user, the program object being operative such that no, 
or restricted, copy or save functions are offered to the user in respect of the 

30 downloaded data in its unprotected form. 

The invention has particular but not exclusive application to downloading 
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data over a network such as the World Wide Web, but is also applicable to 
LANs, WANs and to distribution of data using long term storage media such 
as 3.5 n floppy discs or CD-ROM based technology. 

5 The method of the invention may be used with a conventional browser. 

A message concerning a webpage may be downloaded from the server to the 
client, the message including information concerning the program object, such 
that a request is then uploaded to the server in response to the message, in 
to order to retrieve the program object. The webpage may be written in HTML 
code. The program object may comprise a Java applet although the invention 
envisages the use of other program objects such as Active X or OLE. 

As a result of processing a Java applet, the usual copy and save functions will 
15 not be presented to the user, thereby providing security in respect of the 
unprotected data presented to the user. 

The data presented may comprise text, graphics, pictures, audio or any other 
suitable form. 

20 

The program object may include data concerning a cryptographic key, which 
can then be used to render the downloaded cryptographically protected data 
into an unprotected form suitable for presentation to the user. 

25 An authentication procedure may be employed to ensure that the 

cryptographically protected data is only downloaded to an authenticated 
client. The authentication process may be performed by reference to a 
payment scheme, to enable a royalty to be collected in respect of the 
downloaded, cryptographically protected data. 

30 

It will be understood that no copy protection scheme can ever be completely 
successful, because when data is presented to users, they will have the 



r 

t 

WO 98/44402 PCT/GB98/00808 

■4. 

opportunity to copy it. However in accordance with the invention the effort 
required to break the protection scheme provided by the inventive method 
may be significantly greater than the payment of a monetary sum to permit 
use of the protected data, thereby reducing the risk to the owner of the data 
5 releasing it through the World Wide Web or other open access networks. 

The downloaded data may be steganographically marked, for example with a 
digital watermark. When the identity of the client is known, the watermark 
may include the client identity, in order to provide additional security in the 
10 event that fraudulent copies are made by the user. 

The invention also includes a server configured to perform the inventive 
method. 

is The invention furthermore includes a method of downloading encrypted data 
from a server to a client, including: registering the client with the server by 
determining a machine identifier of the client by analysing its hardware 
and/ or its software configuration, transmitting the machine identifier to the 
server, combining the transmitted machine identifier with a cryptographic key 

20 to form a unique determinator for the client, and transmitting the unique 
determinator to the client, to be stored therein for use subsequently in 
identifying the client to the server, to permit encrypted data to be 
downloaded thereto from the server; subsequently identifying the client to the 
server on the basis of the unique determinator; and then downloading data 

25 encrypted by means of the cryptographic key to the identified client, for 
decryption by the client using the key from the unique determinator. 

The downloaded data can be decrypted at the client using the key from the 
unique determinator. 

30 

The client may be identified to the server by again determining the machine 
identifier for the client, comparing it with the machine identifier included in 
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said unique determinator, and signalling to the server on the basis of the 
outcome of the comparison. 

The client may be authenicated by the server prior to downloading the 
5 encrypted data. This may be carried out by generating a challenge, generating a 
response as a predetermined cryptographic function of the cryptographic key 
for the client as held by the server, and as a function of the key included in 
the unique determinator stored in the client, and authenticating the client on 
the basis of the outcome of the comparison. 

10 

Brief description of the drawings 

In order that the invention may be more fully understood an example will 
now be described with reference to the accompanying drawings, in which: 
Figure 1 is a schematic illustration of a conventional client and server 
15 connected through the World Wide Web; 

Figure 2 is a schematic illustration of a conventional display provided by a 
web browser on the client 3; 

Figure 3 is a schematic illustration of a web server 1 connected to a client 3 
through the World Wide Web 2, in accordance with the invention; 
20 Figure 4 is a schematic illustration of the display of a web browser in 
accordance with the invention; 

Figure 5 is a schematic illustration of data flows between the client and server 
in accordance with an example of the invention; 

Figure 6 is a schematic flow diagram associated with step S10 of Figure 5; 

Figure 7 is a schematic illustration of the BT copyright (BTC) file structure; 
Figure 8 is a flow chart showing in detail the actions carried out during the 
wrapping step 10.5 of Figure 6; 

Figure 9 is a schematic flow diagram associated with step S12 of Figure 5; 
30 Figure 10 is a schematic illustration of data flows associated with a procedure 
for registering a client with the server; and 

Figure 11 is a schematic illustration of authentication, subsequent to 
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registration according to Figure 10, corresponding to step S9 of Figure 5. 
Detailed description 

An example of the invention will now be described in relation to the World 
5 Wide Web (WWW). As is well known, a page of information on a web 
server is identified on the web by means of an individual URL so that it can 
be accessed by a browser running on a client computer. Referring to Figure 
1, a web server 1 is connected through the World Wide Web 2, to a client 
computer in the form of a PC 3. HTML webpages can be downloaded to the 
jo client computer 3 from the web server 1, to be displayed to the user of the 
client computer 3. The HTML document may include links to other HTML 
pages on the same or a different web server, in a manner well known per se. 
The HTML webpages may also include embedded objects such as graphics, 
images and the like. 

75 

The client 3 runs a browser which receives the HTML documents from the 
web server 1 and displays them on the display of the computer. In this 
example, the browser is Java aware i.e. can interpret Java bytecodes received 
from the server. More particularly, as known in the art, when the HTML 

20 document includes a so-called Java applet tag, the server downloads a 

corresponding applet, consisting of Java bytecodes, which are interpreted and 
run by the browser. Typically, the downloaded Java applet allows 
interactivity between the user of the computer 3 and the displayed image. For 
further information, reference is directed to "HTML 3.2 and CGI Unleashed", 

25 supra, Chapter 18. 

An example of the screen display of an HTML webpage is shown in Figure 2. 
The display is provided within a window 4 presented by the browser. 
Examples of a suitable browser are the Microsoft Internet Explorer 3.1 and 
30 the Netscape Navigator. The browser includes a number of conventional 
controls which are operated by clicking on a mouse, in the usual way. For 
example, the browser includes a print button 5 which allows a screen print to 
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be produced of the entire page shown within the browser window 4. Also, 
the browser includes a control, shown schematically at 6, with a drop-down 
menu option "view source", which allows a display to be provided of the 
actual HTML code which is being run. 

s 

A page 7 is shown within the window 4 of the browser. The page is defined 
by a sequence of lines of HTML code which specify the text and layout 
provided on the page. Also, the code specifies areas which receive graphical, 
image data or other data that is downloaded in separate files which have a 
w predetermined tag. In this example a graphics file with a tag "gif" is displayed. 
The HTML code causes the gif file to be displayed within the pre-defined area 
of the page. Thus, in the page 7, the gif file is displayed in region 8 defined by 
the downloaded HTML code. An example of the code for the gif file is 
shown in Code Extract No. 1, below. 



75 



Code Extract No. 1 



CE1.1 <HTML> 
CE1.2 

CE1.3 <HEAD><TITLE>Company X's Homepage</TlTLE></HEAD> 
20 CE1.4 

CE1.5 <BODY> 

CE1.6 Welcome to Company X's Homepage 
CE1.7 

CE1.8 <IMG ALIGN=middle SRC= M ajgraphic.gif'><P> 
25 CE1.9 

CE1.10 <A HREF="another.htmr'>link to another web page</A> 

CE1.11 </BODY> 

CE1.12 

CE1.13 </HTML> 

30 

If the user clicks the computer's mouse in the area of the displayed image 8, 
using the right mouse button, a drop-down menu 9 is displayed which gives 
the user options including "save", to save the digital data corresponding to the 
gif file to the computer's hard disc or to some other storage location, and also 
3i the option to print, using a printer connected to the computer 3 (not shown). 
Thus, the user of computer 3 can make a copy of the digital data which 
comprises the graphics displayed in region 8 and the data can then be 
forwarded to other locations in an unrestricted manner. Because the data is 
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recorded in digital form, it can be replicated many times without degradation 
of image quality. 

Also, the entire page 7, including the graphics display 8, can be printed using 
5 the browser print button 5. However, the printed image quality can only at 
best be of that displayed on the screen of the computer. The printed image 
will be in the analogue domain so any processes that return the image to the 
digital domain will only further reduce the quality. 

10 The displayed HTML page 7 also includes a hotspot 10. When the 

computer's mouse is clicked on the hotspot, a link is established to another 
webpage, which is then displayed within the window 4. The HTML code 
associated with the hotspot 10 includes a URL in order to establish the link to 
another webpage, in a manner well known per se 

15 

As is well known in the art, HTML code can also include a Java applet. This 
consists of a programming object which is downloaded from the server 1, that 
can be run locally, within the browser 4. An applet is specified in HTML by 
a code tag - applet as will be described hereinafter. When the HTML 

20 interpreter in the browser encounters such a tag in a webpage, it refers back 
to the web server, which then downloads Java bytecodes to the browser. 
Typically, applets are used to display animated graphic symbols in a webpage, 
although many other applications can be provided, as well known to those 
skilled in the art. The location and size of the applet display is determined by 

25 instructions in lines of the HTML code. 

If the user clicks the right mouse button on the data displayed by running the 
applet, no drop-down menu is provided corresponding to the menu 9 shown 
in Figure 2. The user can use the view-source button 6 to display the lines of 
30 code which make up the HTML page being displayed, but this does not reveal 
the data that is displayed when the applet is run by the browser. The Java 
interpreter can display gif files when running an applet, within the applet, 
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although normally, gif files are downloaded directly into the webpage because 
it is not normally necessary to process them in terms of Java bytecodes. 

The present invention provides a method by which data can be downloaded 
s to the webpage in a secure manner, and cannot be saved or copied whilst 
being displayed without significant fraudulent effort. 

An example of a downloading process in accordance with the invention will 
now be described in more detail with reference to Figures 3, 4 and 5. In this 
10 example, a webpage containing copyright protected image data is downloaded 
from the server 1 to client computer 3 through the World Wide Web 2. The 
resulting display in the browser 4 is shown in Figure 4 and the processing 
steps are shown in more detail in Figure 5. 

n At step Si the client 3 uploads a request to the server 1 for details of a 
webpage. The request comprises a conventional hypertext file transfer 
protocol (HTTP) page request. The server then, at step S2, gets the page, or 
constructs it "on the fly" and downloads the HTML code corresponding to 
the page, to the client 3 through the World Wide Web (WWW) 2. In the 

20 usual way, the HTML code includes references for images, graphics, sound 
bytes and the like and in response to such codes, the server will upload HTTP 
requests for corresponding files to be displayed in the webpage. For example, 
referring to the webpage 7 shown in Figure 4, it includes a graphical image 11 
constituted by a gif file. In order to obtain the data for the display 11, an 

2$ HTTP request is uploaded at step S3 to the server, and corresponding binary 
graphical data is downloaded at step S4. This data is then displayed in region 
11 of the page 7 shown in Figure 4. However, this data is not copyright 
protected because the user can save and copy it using the right mouse button 
as previously explained with reference to Figure 2. 

30 

However, in accordance with the invention, region 12 of the displayed page 7 
is copyright protected. The HTML code associated with the page 7 of Figure 
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4 is shown in Code Extract No. 2, below, and references an applet Al at line 
CE2.8. 

Code Extract No. 2 

5 CE2.1 <HTML> 
CE2.2 

CE2.3 <HEAD><TITLE>Company X's Homepage</TITLE></HEAD> 
CE2.4 

CE2.5 <BODY> 

w CE2.6 Welcome to Company X's Homepage with added copyright protection 
CE2.7 

CE2.8 <APPLET CODE=BTCBrowserApplet.class WIDTH=200 HEIGHT=150> 
CE2.9 <PARAM NAME = file VALUE^'ajraphicgif > 
CE2.10 </APPLET> 
is CE2.11 <IMG SRC= ,, another_graphic.gif , ><P> 
CE2.12 

CE2.13 <A HREF="another.html">link to another web page</A> 

CE2.14 </BODY> 

CE2.15 

20 CE2.16 </HTML> 

The Java bytecodes for running the applet are downloaded to the client from 
the server 1 to the client 3 at step S6 in Figure 5. The applet Al is then run 
on the client, using the Java interpreter within the browser, in order to 
25 prepare the browser to receive data to be displayed in region 12 of the 
webpage, downloaded from the server. 



The data to be displayed in region 12 is cryptographically protected so that it 
cannot be readily deciphered, by monitoring the downloaded signals. In this 
30 example, the cryptographic protection includes encryption of the downloaded 
data together with hashing, as will be explained in more detail hereinafter. 

The applet Al allows the downloaded file to be decrypted and checked for 
integrity i.e. hash verified. More specifically, the applet Al includes the 
35 following: a hashing algorithm HA, a master hashing key K MH , an encryption 
algorithm EA, an encryption key K E and a BTC file request. As used herein, 
the term BTC refers to a file of copyright protected data, for display at the 
browser. 
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The applet Al is ran at step S7 on the client computer 3 and at step S8, the 
applet causes a BTC file request to be uploaded to the server 1. 

At step S9, the server performs an authentication step in order to determine 
5 whether it is safe to download the requested BTC file to the client. The 
authentication may be carried out in a number of different ways. For 
example, the server may only download the file if the client has made a 
payment, so as to allow the owner of the copyright of the BTC file to collect 
a royalty for the act of viewing the file. A micropayment scheme for this 
io purpose is described in our co-pending patent application No. GB 9624127.8 
entitled Transaction System. Alternatively, the client 3 may be known to the 
server in respect of some other service being provided, for example an Internet 
home shopping scheme, and the client's credentials may be authenticated by 
means of procedures already in use for the service. 

15 

Assuming that the client 3 passes the authentication step S9, the server then, 
at step S10, prepares the BTC file for downloading to the client 3. 

The step S10 is shown in more detail in Figure 6. At step S10.1 the relevant 
20 data is fetched. This may comprise graphics data, audio, video, text or an 
other appropriate data format. 

At step S10.2, the data is watermarked. This may involve changing some of 
the bits in the data stream so as to record a pattern which is imperceptible in 

25 the image displayed by the browser 4, when the data is downloaded to the 
client. Watermarking is a well known example of a technique termed 
steganography. For a general review of this technique and digital 
watermarks, reference is directed to "Disappearing Cryptography", P. Wayner, 
Academic Press 1996 (ISBN 0-12-738671-8). Watermarking gives additional 

30 security in the event the protected data is copied, because knowledge of the 
source of copying can be determined from the watermark. Thus, if the 
authentication step (step S9) provides the server with a particular identity for 
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the client, the identity may be watermarked at step S10.2 into the data. 

At step S10.3, the watermarked data is hashed at the server, using a copy of 
the hashing algorithm HA that was downloaded in applet Al and a file- 
5 specific session hashing key K SH . The hashing process consists of using the 
algorithm HA and the key K SH together with the data bits of the encrypted 
data, to form additional bits HV, in the manner of parity bits, that are added 
to the data string. The hashing ensures that sections of data are not removed 
and replaced by others, in order to ensure that for example a command "pay 
to U$l w is not changed to "pay US$100". A suitable form of hashing algorithm 
is SHA which is described in more detail in National Institute of Standards 
and Technology, Federal Information Processing Standards Publication 180-1 
(NIST FIPS PUB 180-1) SECURE HASH STANDARD. 

n As step S10.4 the data is encrypted at the server 1, using a copy of the 
algorithm EA and the key K E which were downloaded previously to the 
client, in the Java bytecodes of applet Al. An example of an encryption 
algorithm is the DES algorithm and reference is directed to the National 
Institute of Standards and Technology, Federal Information 

20 Processing Standards Publication 46-2 (NIST FIPS PUB 46-2) DATA 
ENCRYPTION STANDARD (DES). The encryption algorithm AE is 
actually a pair of algorithms, one of which is used to encrypt and the other to 
decrypt. It will be understood that the key K E is changed periodically as is 
known to be good practice in the art. 

25 

Then the resulting file, at step S10.5 is wrapped in a proprietary BTC file 
format which itself includes additional cryptographic protection techniques. 

The proprietary BTC file format is shown in Figure 7. The BTC file format 
jo comprises header information H, and an embedded file EF. The processing 
performed at step S10.5 is shown in more detail in Figure 8. 



WO 98/44402 



PCT/GB98/00808 



•13- 

The BTC file in step S10.5 is generated as follows. In step S 10.5.1 partial 
information for the header H is generated. This comprises a version number 
for the file format, and any specific copyright protection control information 
CI for the file. 

5 

In step S 10.5.2 the integrity of all of this information is protected by 
generating a hash value HV head using a hashing key HK head . 

In step S10.5.3 the hashing key used on the header HK head , and the generated 
w hash value HV hcad are both appended to the header H, so as to complete it. 

In step S10.5.4 the watermarked, and encrypted file generated in step S10.4 is 
appended to the header H to form part of the embedded file EF in Figure 7. 

is In step S 10.5.5 information which describes the hashing that was performed in 
step S10.3 is appended to the file EF. This information comprises the specific 
session hashing key Ksh used on the embedded file hereinafter referred to as 
HKembeddcd an( i the hash value HV generated in step S10.3 hereinafter referred 
to as HV^b^. This completes the BTC file. 

20 

At step Sll (Figure 5) the BTC file is downloaded to the client 3. 

Then, at step S12, the BTC file is processed using the applet Al previously 
downloaded to the client 3. The processing performed at step S12 is shown in 

25 more detail in Figure 9. At steps S12.1 and S12.2 the integrity of the content 
of the header H is verified. In step S12.1, using the hashing algorithm HA, 
and the hashing key used on the header HK^ (recovered from the header H 
of the BTC file) the hash value HV head of the header is generated. At step 
S12.2 the value is checked against the hash value HV head recovered from the 

30 BTC file header H. 

If the result of the check is unsatisfactory, an error banner is displayed at step 
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S12.3 in the region 12 (Figure 4) in the window of the browser 4. However, 
if the integrity check is satisfactory, the applet Al checks in step S12.4 that it 
knows how to process files of the type specified in the version number 
recovered from the header 1 of Figure 7. If the result of the check is 
5 unsatisfactory, an error banner is displayed at step S12.3 in the region 12 
(Figure 4) in the window of the browser 4. However if the check is 
satisfactory, the applet Al can make use of the specific copyright protection 
control information CI for the file (present in the header H of Figure 7) when 
processing user requests for data manipulation. 

10 

In step S12.5 the embedded file EF is decrypted using the encryption 
algorithm EA and the key K E previously downloaded in the applet Al. 

In steps S12.6 and S12.7 the integrity of the content of the decrypted file is 
is verified as follows. In step S12.6, using the hashing algorithm HA, and the 
hashing key used on the embedded file (recovered from the embedded file EF 
in the BTC file) the hash value HV^j^. is generated. In step S12.7 the 
value is checked against the hash value HV cmbedded recovered from the BTC 
embedded file EF. 

20 

If the result of the check is unsatisfactory, an error banner is displayed at step 
S12.3 in the region 12 (Figure 4) in the window of the browser 4. However, 
if the integrity check is satisfactory, the applet Al can display the content of 
the decrypted file in the region 12 (Figure 4) in the window of the browser 4 
25 in step S12.8. 

Thus, if the BTC file contains image data, the image is displayed, together 
with its imperceptible watermark, in the region 12 of webpage 7 shown in 
Figure 4. The user cannot save or copy the image data. Because the Java 
30 enabled browser is running an applet for the image data in region 12, the 
functions of the right mouse button are disabled for region 12. Therefore, if 
the user clicks the mouse with the right button, no menu option is 
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automatically provided for saving, copying or printing the displayed data in 
region 12. The right mouse button function is disabled according to usual 
Java operation for applets as previously described. The user could operate the 
print button 5 of the browser 4 but this would only print a low quality image 
s and would not permit the digital data that comprises the image 12 to be 
recovered for the purpose of providing a high quality copy. 

Furthermore, if the downloaded BTC file is cached in the browser, it will be 
cached in its cryptographically protected form so that making copies of the 
10 cached file does not permit access to the downloaded data in the BTC file, 
unless substantial code breaking activities are fraudulently undertaken by the 
user. 

It will be understood that no copyright protection scheme can ever be 
n completely successful because when a copyright work is presented to a user, 
they will have an opportunity to copy it. The purpose of the present scheme 
however, is to make payment of a small monetary sum in respect of the 
copyright protected work, more attractive than the effort of breaking the 
protection regime provided by the invention. An analogy can be drawn with 
20 copying pages of a book with a photocopier. In theory, it would be possible 
to borrow a book and then photocopy all of its pages. However, in practice, 
this is very inconvenient and it is probably easier to purchase another copy of 
the book. Similarly, in the described example of the invention, it is simpler 
to pay for viewing of the copyright work than spending time breaking the 
25 copyright protection scheme. 

Many modifications and variations fall within the scope of the invention. For 
example, the running of the applet Al may be modified according to the 
downloaded copyright control information CI in order to provide a restricted 
30 set of functions when operating the right mouse button on the display area 
12. For example, operation of the right mouse button on the display area 12 
may optionally provide a drop down menu which offers the user a copyright 
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notice giving details of the copyright owner of the displayed image. 

Also, the menu may offer an option to save the document in an unprotected 
format upon payment of an additional larger fee than that paid to view the 
5 image initially. 

Considering the applet Al downloaded at step S6 in Figure 5, it may not be 
necessary to include the encryption and hashing algorithms EA and HA for 
every downloading operation. It is preferable, but not essential that the 
w algorithms are kept secret, so that they could be pre-loaded onto the client 
computer, and held in a data file on its hard disc. 

If the server 1 knows the identity of the client 3, at the time of requesting the 
applet Al, individual encryption and hashing keys can be downloaded in the 
15 Java bytecodes Al, at step S6. The embedded EF file in Figure 7 can then be 
encrypted and hashed using the individual keys, specific to the client 3, when 
the file is prepared at step S10 for downloading. The use of individual keys, 
specific to the client 3, improves security. 

20 An example of how an individual key can be provided, will now be described 
with reference to Figures 10 and 11. Figure 10 illustrates an initial registration 
procedure by which details of the client 3 are made known to the web server 
1. At step Rl, the client 3 contacts the web server 1 with a request to 
become registered for the copyright protection scheme. The web server 1, at 

25 step R2 provides the client with a program referred to herein as a dogtag. 
The dogtag is typically provided on a compact optical disc (CD), possibly in 
combination with other software, e.g. for shopping over the Internet or a 
micropayment scheme. By sending the CD through the postal service to a 
specified address, there is reasonable certainty that the client machine which 

30 runs the dogtag corresponds to the user who requested it. The CD may also 
include the encryption and hashing algorithms EA and HA which can be pre- 
loaded onto the clients hard disc. 
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At step R3, the dogtag program is run in order to provide a machine 
identification code (ME)) which provides a substantially unique identification 
of the client. The dogtag program scans the client computer both in terms of 
its hardware and software. Examples of characteristics of the client which can 
5 be used to form the MID are as follows: 

The physical components of which the computer comprises (size of 

memory, presence of CD drive) 

Characteristics of the physical components (manufacturer, number of 
tracks on a hard disc) 
w Location of static information on a hard disc (bad sectors) 

Location of long lived files on a hard disk (operating system 
executables) 

Operation characteristics 
Logical directory and file structures 
n Files specifically created to identify the machine 

Data added to long lived files to identify the machine 
The configuration of applications and the operating system 
Identification number of hardware, e.g. hard disc. 

20 For added security, the dogtag can only be run once for registration purposes. 

At step R4, the MID is uploaded through the WWW 2 to the web server 1. 
At step R5 an individual cryptographic key Ki is embedded together with the 
MID in the bytecodes of the Java applet which is then downloaded at step R6 
2; to the client 3 and is stored on the hard disc thereof at step R7. The 

individual key Kj actually comprises a set of keys, individually provided for 
each client 3 for use in hashing and encrypting as previously described. 

Referring now to Figure 11, this shows how the authentication step, step S9 
30 in Figure 5, can be performed, subsequent to the registration procedure of 
Figure 10. 
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At step Ql, the dogtag program is used to produce a current MID, This is 
compared, at step Q2, with the MID stored on the hard disc of the client at 
step R7, during the registration procedure. If the MIDs are the same, the 
current value of MID is sent at step Q3 to the web server 1. 

5 

At step Q4, the web server 1 generates a challenge consisting of a random 
number, RAND, which is transmitted to the client 3. Then, at step Q5, the 
client computes RESPONSE as a cryptographic function of the MID, the 
challenge RAND and the stored individual cryptographic key Kj. 

w 

At step Q6, the RESPONSE is sent to the web server 1 through WWW 2. 
Meanwhile at step Q5, the web server also generates a response, namely 
RESPONSE* in the same was as performed by the client 3. At step Q7 the 
RESPONSE is compared with RESPONSE' and if they correspond, the client 
15 has been successfully authenticated. In this situation, the BTC file can be 
downloaded, as shown at steps S10 and Sll in Figure 5, using individual keys, 
specific to the client, for encryption and hashing. The keys used may be 
session keys, generated from key batches and a batch number. 

20 Other forms of authentication can be used. For example, a smart card can be 
used in the manner of a SIM card used with GSM mobile telephones, in 
combination with a SIM card reader connected to the client 3. This has the 
advantage that the identity of the user is monitored rather than the identity of 
the client computer, so that the user can move from machine to machine and 

25 still use the service. 

Referring again to Figure 3, the web server 1 is illustrated as having different 
functional blocks 13, 14 and 15. Block 13 performs the cryptographic 
processes associated with steps S10.3 and S10.4 of Figure 6, block 14 performs 
30 the watermarking processes described with reference to step S10.2 and block 
15 performs the other processes. In some situations, it may be convenient to 
provide separate cryptographic servers and watermark servers so that the 
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provision of keys and watermarking can be performed as a separate service to 
a number of different web servers. 

Whilst the described example of the invention uses the Java programming 
5 language, it will be understood that other hypermedia languages may be used, 
for example Active X and OLE. 

The registration and authentication procedure described with reference to 
Figure 10 and 11 may also be used for other authentication processes in which 
10 a client is required to register with a web server. Thus, this procedure could 
be used for processes which involve other data transfer regimes between the 
client and server in which a registration and authentication is needed. 
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Claims 

1. A method of copy protecting data sent from a server to a client for 
5 presentation to a user, comprising: 

cryptographically protecting the data; 

sending the cryptographically protected data to the client; and 
selectively controlling copying functions of the client in respect of the data 
whilst the data is being held by the client in a form suitable for presentation 
w to the user. 

2. A method according to claim 1 wherein the data is protected by 
encryption. 

is 3. A method according to claim 1 or 2 wherein the integrity of the data is 
protected cryptographically. 

4. A method according to claim 3 wherein the integrity of the data is 
achieved by hashing. 

20 

5. A method according to any preceding claim including authenticating 
that the client is permitted to receive the data. 

6. A method according to any preceding claim including identifying the 
25 client to the server before the data is sent to the client. 

7. A method according to any preceding claim including: 
downloading a program object to the client, 

running the program object on the client such that a request is uploaded to 
30 the server for a file containing the cryptographically protected data, 
downloading the file to the client, and 

rendering the cryptographically protected data in an unprotected form suitable 
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for presentation to the user, 

the program object being operative such that no, or restricted, copy or save 
functions are offered to the user in respect of the downloaded data in its 
unprotected form. 

5 

8. A method according to claim 7 including downloading a message 
concerning a webpage wherein the message includes information concerning 
the program object, and uploading a request for the program object in 
response to said information in the message. 

w 

9. A method according to claim 8 wherein the message is in HTML code. 

10. A method according to claim 8 or 9 wherein the program object 
comprises a Java, Active X or OLE applet. 

11. A method according to any one of claims 7 to 10 wherein the message 
is presented to the user through a browser. 

12. A method according to any preceding claim wherein the data is sent to 
20 the client from the server through a network. 

13. A method according to claim 12 wherein the network comprises the 
World Wide Web. 

25 14. A method according to any one of claims 7 to 10 wherein the program 
object includes data concerning a cryptographic key, and including using the 
key to render the downloaded cryptographically protected data into an 
unprotected form suitable for presentation to the user 

jo 15. A method according to any preceding claim wherein the server and the 
client each hold data corresponding to a cryptographic key and a machine 
identifier for uniquely identifying the client, the method including: 
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sending a challenge to the client, such that it generates a signed response as a 
cryptographic function of the key and the machine identifier held therein, 
generating from the cryptographic key and machine identifier held associated 
with the server, a corresponding signed response as a cryptographic function 
5 of the key and the machine identifier, 

comparing the signed responses from the client and the server, and if they 
correspond, performing the encryption with the key, 
and performing the decryption at the client with the key. 

to 16. A method according to any preceding claim wherein the data is 
steganographically marked. 

17. A method according to any preceding claim including registering the 
client with the server. 

18. A method according to any preceding claim including; 
determining a machine identifier of the client by analysing its hardware 
and/or its software configuration, 

transmitting the machine identifier to the server, 
20 combining the transmitted machine identifier with a cryptographic key to 
form a unique determinator for the client, 

transmitting the unique determinator to the client, to be stored therein for use 
subsequently in identifying the client to the server, to permit encrypted data 
to be downloaded thereto from the server. 

25 

19. A server configured to perform a method as claimed in any preceding 
claim. 

20. Initiation by the client, of the downloading of copy protected data by 
30 a method according to any preceding claim. 

21. A copy protected data stored on the client by a method according to 
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22. A method of downloading encrypted data from a server to a client, 
including: 

5 registering the client with the server by 

determining a machine identifier of the client by analysing its hardware 
and/or its software configuration, 

transmitting the machine identifier to the server, 
combining the transmitted machine identifier with a cryptographic key 
to to form a unique determinator for the client, and 

transmitting the unique determinator to the client, to be stored therein 
for use subsequently in identifying the client to the server, to permit 
encrypted data to be downloaded thereto from the server; 
subsequently identifying the client to the server on the basis of the unique 
n determinator; and then 

downloading data encrypted by means of the cryptographic key to the 
identified client, for decryption by the client using the key from the unique 
determinator. 

20 23. A method according to claim 22 including decrypting the downloaded 
data at the client using the key from the unique determinator. 

24. A method according to claim 22 or 23 wherein the client is identified 
to the server by again determining the machine identifier for the client, 

25 comparing it with the machine identifier included in said unique determinator, 
and signalling to the server on the basis of the outcome of the comparison. 

25. A method according to claim 22, 23 or 24 including authenticating the 
client to the server prior to downloading of the encrypted data. 

30 

26. A method according to claim 25 including generating a challenge, 
generating a response as a predetermined cryptographic function of the 
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cryptographic key for the client as held by the server, and as a function of the 
key included in the unique determinator stored in the client, and 
authenticating the client on the basis of the outcome of the comparison. 

5 27. A client configured to perform a method as claimed in any one of 
claims 22 to 26. 



WO 98/44402 



PCT/GB98/00808 




SUBSTITUTE SHEET (RULE 26) 



WO 98/44402 



PCT/GB98/00808 




2/8 



Back 



t 



fofward 


stop 




refresh 


home 


search 




Print 





address [ 



Welcome to Company X's Homepage 

8 



graphics display 






Mve 











|8§S| link to another web page 
10 



view^M 



T7 

Fig. 2 (Prior Art) 



I edtt | view I go I i>wP I 



t 





stop 




refresh 


home 


searci 


i 


Print 





address f 



Welcome to Company X f s Homepage 
with added copyright protection 



Copyright 
protected 
document 



11 



graphics display 



12 



link to another web page 
10 \^ 



IS 



Fig. 4 

SUBSTITUTE SHEET (RULE 26) 



XT 



WO 98/44402 PCT/GB98/00808 



3/8 




client computer 



Java applet 



SUBSTITUTE SHEET (RULE 26) 



WO 98/44402 PCT/GB98/00808 



W8 



Web server 1 



Client 3 



S2- 



S4- 



S5K- 



S7 

i 
I 
l 

sek- 



HTTP request for web page 



reply: HTML code for webpage 



HTTP request for gif. file 



binary data 



request for applet 



download applet bytecodes 



BTC file request 



Ss[ authentication 

i 
i 
i 

Sljo prepare BTC file for downloading 

i 
i 

download BTC file 



S1}3- 



S12 



run applet 



Fig. 5 



process BTC file 



SUBSTITUTE SHEET (RULE 26) 



PCT/GB98/00808 



5/8 



stepS 10 



S10.1 



get file 



S10.2 



watermark file 



S10.3 



hash with algorithm HE 
& key KH 



S10.4 



encrypt with algorithm 
EA&keyKE 



S10.5 



wrap file 



gotostepSH 



Fig. 6 



SUBSTITUTE SHEET (RULE 26) 



WO 98/44402 



PCT/GB98/00808 



6/8 



BTC file format 



header information 
\ 



H 



embedded file information 
V 



EF 



step SI 0.5 



put into header: 

1. version number 

2. specific control options (CI) 



generate HV 




head 


using HA & HK 


head 


\ 


* 


put HK & 


HV 


head 


head 


into header 





write watermarked and encrypted 
file into EF (Fig. 7) 



write HV 

embedded 

and HK 

embedded 
to EF (Fig. 7) 



S10.5.1 



S1 0.5.2 



S10.5.3 



S1 0.5.4 



S10.5.5 



Fig. 7 



Fig. 8 



SUBSTITUTE SHEET '(RULE 26) 



WO 98/44402 



PCT/GB98/00808 



7/e 



Fig. 9 



S12.3 



display error 
banner 



N 



step S12 



generate HV 

head 1 
using HA & HK 

head 




N / handle the n 
version type ? 



decrypt embedded file 
using EA & KE 



generate HV 

embedded' 
using HA & HK 

embedded 




S12.1 



S12.2 



S12.4 



S12.5 



S12.6 



S12.7 



S12.8 



SUBSTITUTE SHEET (RULE 26) 



WO 98/44402 



PCT/GB98/00808 



Registration 
Web server 1 



8/8 



Client 3 



initial access 



R2- 



R3 



supply dogtag CD by mail 



upload MID 



execute Dogtag 
to provide MID 



R S Embed individual cryptographic key 
\ and MID in applet 

download applet bytecodes 
— 



Fig. 10 



Store applet in client 



Authentication 

Web server 1 Client 3 

use dogtag to compute current MID 

Q1 ; 

; compare current MID with version on hard disk 

Q2 ; jf curren t MID=stoted MID, upload to server 

> i 
• i 

„ uploa d MID ; 

i 

< i 

t i 
■ i 

generate random number ! 

challenge = RAND ! 

\ download RAND ; 

Q4 ! — >> 



Q 5 generate RESPONSE generate RESPONSE 

\ : 

; ^ upload RESPONSE ; 

Q6 — . 

i : Fig. 11 

Q7 : successful authentication if RESPONSE = RESPONSE' 



SUBSTITUTE SHEET {RULE 26) 



INTERNATIONAL SEARCH REPORT 



Intern.. >nal Application No 

PCT/GB 98/00808 



A. CLASSIFICATION OF SUBJECT MATTER 

IPC 6 G06F1/00 H04L29/06 



According to international Patent Classification (IPC) or to both national classification and IPC 



B. FIELDS SEARCHED 



Minimum documentation searched (classification system followed by classification symbols) 

IPC 6 G06F H04L 



Documentation searched other than minimum documentation to the extent that such documents are included in the fields searched 



Electronic data base consulted during the international search (name of data base and. where practical, search terms used) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category • Citation of document, with indication, where appropriate, of the relevant passages 



Relevant to claim No. 



WO 94 07204 A (UNILOC CORP PTY LIMITED 

;UNIL0C SINGAPORE PRIVATE LIMIT (SG); 

RICH) 31 March 1994 

see abstract; figures 2,3,7-9 

see claims 1-30 



US 5 235 642 A (WOBBER EDWARD ET AL) 10 

August 1993 

see abstract; figure 2 

see claims 1-9 



22,23, 
25,27 



15,17-19 

22,23, 
25,27 



-/- 



Further documents are listed in the continuation of box C. 



Patent family members are listed in annex. 



0 Special categories of cited documents : 

'A* document defining the general state of the art which is not 
considered to be of particular relevance 

"E" earlier document but published on or after the international 
filing date 

V document which may throw doubts on priority claim (s) or 
which is cited to establish the publication date of another 
citation or other special reason (as specified) 

"O" document referring to an oral disclosure, use, exhibition or 
other means 

"P" document published prior to the international filing date but 
later than the priority date claimed 



T" later document published after the international filing date 
or priority date and not in conflict with the application but 
cited to understand the principle or theory underlying the 
invention 

"X" document of particular relevance; the claimed invention 
cannot be considered novel or cannot be considered to 
involve an inventive step when the document is taken alone 

"Y" document of particular relevance; the claimed invention 

cannot be considered to involve an inventive step when the 
document is combined with one or more other such docu- 
ments, such combination being obvious to a person skilled 
in the art. 

"£■ document member of the same patent family 



Date of the actual completion of the international search 



23 June 1998 



Date of mailing of the international search report 



01/07/1998 



Name and mailing address of the ISA 

European Patent Office, P.B. 5818 Patentlaan 2 
NL • 2280 HV Rijswijk 
Tel. (+31-70) 340-2040. Tx. 31 651 epo nl. 
Fax: (+31-70) 340-3016 



Authorized officer 



Powell, D 



Form PCTVISA/210 (second sheet) (July 1992) 



page 1 of 2 



INTERNATIONAL SEARCH REPORT 



tntern. ->nal Application No 

PCT/GB 98/00808 



C(Contlnuatlon) DOCUMENTS CONSIDERED TO BE RELEVANT 


Category • 


Citation of document, wtth indication .where appropriate, ot the relevant passages 


Relevant to claim No. 


Y 


DEAN D ET AL: "JAVA SECURITY: FROM 
HOTJAVA TO NETSCAPE AND BEYOND" 
PROCEEDINGS OF THE 1996 IEEE SYMPOSIUM ON 
SECURITY AND PRIVACY, OAKLAND, CA. , MAY 6 
- 8, 1996, 

no ^YMP 17 fi Ma\/ lOOfi TMCTTTIITT flF 
nu. omr. i/, o nay 17^0, liijlliuic. Ur 

ELECTRICAL AND ELECTRONICS ENGINEERS, 

pages 190-200, XP000634844 

see page 190, right-hand column, line 3 - 

page 192, left-hand column, line 5 

see page 194, right-hand column, last 

paragraph - page 196, left-hand column, 

pardyrapn 1 


1-13,21 


Y 


YOURDON E: "JAVA, THE WEB, AND SOFTWARE 

DEVELOPMENT" 

COMPUTER, 

voi. £3, no. o, Mugust 1770, 
pages 25-30, XP000632764 
see page 28, left-hand column 


1-13,21 


A 


EP 0 718 761 A (SUN MICROSYSTEMS INC) 26 
June 1996 

see abstract; figure 3 

see page d, line *c4 - line w 


1,7,8 


A 


BENDER W ET AL: "TECHNIQUES FOR DATA 
HIDING" 

IBM SYSTEMS JOURNAL, 
vol. 35, no. 3/04, 1996, 
pages 313-335, XP000635079 

see aDS tract 


16 


A 


LEW0NTIN S: "THE DCE WEB TOOLKIT: 
ENHANCING WWW PROTOCOLS WITH LOWER-LAYER 
SERVICES" 

COMPUTER NETWORKS AND ISDN SYSTEMS, 
vol. ci , no. o, l April 1995, 
pages 765-771, XP000498084 




A 


MCGRAW G ET AL: "JAVA SECURITY AND TYPE 

SAFETY" 

BYTE, 

vol. 22, no. 1, January 1997, 
page 63/64 XP000679974 




A 


HAMILTON M A: "JAVA AND THE SHIFT TO 

NET-CENTRIC COMPUTING" 

COMPUTER, 

vol. 29, no. 8, August 1996, 
pages 31-39, XP000632765 





Form PCT/ISA/210 (continuation of second ahMt) (Jufy 1992) 



page 2 of 2 



INTERNATIONAL SEARCH REPORT 

Information on patent family members 



Intern^ .onal Application No 

PCT/GB 98/00808 



Patent document 
cited in search report 


Publication 
date 


Patent family 
members) 


Publication — 
date 


WU 9hU/ZU4 A 


31-03-1994 


AU 


678985 B 


19-06-1997 






AU 


4811393 A 


12-04-1994 






CA 


2145068 A 


31-03-1994 






.CN 


1103186 A 


31-05-1995 






EP 


0689697 A 


03-01-1996 






NZ 


255971 A 


26-05-1997 






US 


5490216 A 


06-02-1996 



US 


5235642 


A 


10-08- 


■1993 


EP 


0580350 A 


26-01-1994 












JP 


6202998 A 


22-07-1994 


EP 


0718761 


A 


26-06- 


•1996 


US 


5630066 A 


13-05-1997 












JP 


8263447 A 


11-10-1996 



Form PCT/1SA/210 (patent family annex) (July 1992) 



